CVE-2018-8378: vulnerability in Microsoft Office
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.3%
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office.
Affected products
Microsoft · Microsoft Excel ViewerMicrosoft · Microsoft OfficeMicrosoft · Microsoft Office Word ViewerMicrosoft · Microsoft SharePointMicrosoft · Microsoft SharePoint ServerMicrosoft · WordRelated CVEs — Microsoft Office
In the same product, most dangerous first.